Error: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer: CRL has expired

Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft
File:                     c68f99cd-e059-4345-ac58-8ebecccac84e.mft (raw, json)
Hash identifier:          zS4bbjR5J9wFwBNkRuBgQoODQ9o4zvLb93d8OF4gv1g=
Subject key identifier:   91:D7:13:87:80:76:69:92:99:A8:19:6E:AC:B9:10:C8:C1:E5:1D:0E
Authority key identifier: 0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38
Certificate issuer:       /CN=c68f99cd-e059-4345-ac58-8ebecccac84e
Certificate serial:       010D0C9F4328584FBD89A825397DB1645C62F320
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft
Manifest number:          010D0C9F4328584C3242087693EDB57F0396C060
Signing time:             Thu 05 Nov 2026 15:00:24 +0000
Manifest this update:     Thu 05 Nov 2026 15:00:24 +0000
Manifest next update:     Sat 07 Nov 2026 15:00:00 +0000
Files and hashes:         1: 17bf6583-91af-3e09-bafa-177892f15145.roa (hash: 1H+EENvtWdqqDXBTRgjTa/2A+zq3Bm3bAYAAR2JSyyI=)
                          2: b32c3b67-a8df-3503-9350-ca9f3aaef95f.roa (hash: TYKbcMrmU8MEazGDnupuAHPZVlIBAcp1Qp/aS+IrudQ=)
                          3: b32d6a9e-e1bd-3605-ac5a-95ebe44b73a0.roa (hash: pN2uSonbx4Aqa5PIRaX5t0NtHKfvSkUAZSSQjESb0vk=)
                          4: c68f99cd-e059-4345-ac58-8ebecccac84e.crl (hash: 1yXk4u3S5iyAYSmzVhyWj/IhEMXy2jnLKOjsVqNC7js=)
                          5: fb9ce744-a3c7-3d18-ac64-bea179fc1c13.roa (hash: oqmIHlm2Ju3a3uyUkNH1fO5tuX1LNt8e/QC1w+1BEg4=)
                          6: ff3d9eaa-edd5-32fb-b3d6-4c7526b8be0f.roa (hash: EHZLMqCD+fhPTucWnDICYgOegVdbBv1KkYM5bwZiidU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:bd:89:a8:25:39:7d:b1:64:5c:62:f3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68f99cd-e059-4345-ac58-8ebecccac84e
        Validity
            Not Before: Nov  5 15:00:24 2026 GMT
            Not After : Nov  7 15:00:00 2026 GMT
        Subject: CN=6700bfc2-dd73-4e6e-bb2b-6641135bf848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:24:6e:3b:b1:c3:af:12:02:05:50:35:72:9d:
                    80:a8:3b:fc:12:f1:3e:ce:d8:e2:43:56:b0:72:f3:
                    39:de:0a:43:b5:8e:df:da:dd:11:00:ae:06:24:18:
                    5a:33:93:f9:6a:a3:70:73:10:66:17:0b:41:80:83:
                    68:e9:2a:86:81:41:01:13:04:fc:77:c8:95:df:c7:
                    92:e3:ed:6b:60:e9:e9:28:6a:e4:ab:1b:d4:99:ea:
                    95:5c:0c:5f:26:cd:29:de:c4:28:d0:a6:54:f5:fc:
                    be:ed:28:7c:0e:28:b5:1f:59:55:79:a0:2b:bb:a1:
                    c1:a0:1a:94:94:37:ae:7a:f9:73:f7:2c:eb:27:5e:
                    69:e0:22:75:fc:d7:7f:43:c0:c2:ea:f9:12:0b:26:
                    56:66:90:86:9f:75:98:82:93:ac:f2:15:f3:6b:06:
                    d2:e9:ad:fb:70:12:0b:96:c3:26:3e:76:8d:bd:80:
                    85:47:68:78:8d:8b:88:a2:c0:2e:78:cf:5d:08:80:
                    c9:74:8a:54:c9:ef:fa:1a:ce:c6:62:e9:61:58:3b:
                    13:54:4f:7e:46:8b:fa:ed:25:76:08:0d:2e:3e:2a:
                    e0:61:d9:4e:c7:19:4f:82:c8:02:76:9a:ec:28:ed:
                    a3:ef:5f:a6:22:9e:a5:75:d7:47:36:b4:0c:19:40:
                    fe:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D7:13:87:80:76:69:92:99:A8:19:6E:AC:B9:10:C8:C1:E5:1D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e/c68f99cd-e059-4345-ac58-8ebecccac84e.crl

            X509v3 Authority Key Identifier:
                keyid:0A:66:C6:B5:E0:5F:C3:B6:7C:46:EA:46:88:F5:BA:1E:86:0C:0C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c68f99cd-e059-4345-ac58-8ebecccac84e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:55:8c:37:f5:5a:71:5c:8b:f8:d0:85:cf:2b:e4:dc:1f:b5:
         ed:8d:61:6d:42:1f:fe:61:08:29:6a:9a:75:2e:fc:6f:ef:63:
         70:b0:df:b4:2a:eb:2d:e7:83:76:22:9d:1d:74:65:56:66:3d:
         32:a3:8b:59:83:b6:18:e9:ea:58:91:0c:f2:f4:04:0f:19:64:
         15:12:74:87:3f:46:44:83:2b:4a:20:e0:c2:bd:e8:b4:ba:7f:
         1e:80:83:02:9e:0f:14:65:01:2b:6c:64:57:a4:a5:eb:82:54:
         59:fd:53:22:69:08:71:e4:28:c8:ed:1c:2e:cd:82:80:a6:a5:
         56:a2:cc:18:4a:6f:70:ad:f4:80:c8:01:9d:db:4a:a7:04:ab:
         24:5b:fb:81:01:5f:18:e3:38:b0:00:fc:0f:5e:55:93:3a:13:
         46:d4:2f:0f:5a:6f:60:87:7f:10:28:66:cb:eb:23:7c:d0:84:
         46:86:85:38:23:c5:db:c0:fd:c2:d9:b4:e5:c0:d3:91:a1:25:
         49:b1:b9:fb:29:df:59:67:e0:94:5a:4c:2e:77:28:7f:8c:bd:
         8e:b1:28:1e:b8:81:68:ac:83:32:a4:df:0a:6e:37:30:8a:e3:
         d5:57:23:04:07:1e:05:ab:a6:d1:3b:9f:51:04:36:a9:14:79:
         3c:f7:94:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 14:26:48 2026 by rpki-client